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Amendments to the Claims 

All claims are listed below with amended claims so marked. This listing of claims 
will replace all prior versions, and listings, of claims in the application: 



1 1 . (Currently Amended) A method for de-authenticating from a first web 

2 server security realm protected by an authentication scheme lacking a de-authentication 

3 operation, the method comprising: 

4 attempting to access a first resource in a first security realm protected by the 

5 authentication scheme; 

6 receiving a request for authentication credentials in response to said attempting 

7 to access the first resource; 

8 supplying said authentication credentials in response to the request so as to 

9 become authenticated in the first security realm; and 

10 accessing a logout resource in the first security realm, said logout resource 



1 1 configured to automatically authenticate with a second security realm such that ©ft 

1 2 accessing tbefeef the logout resource results in de-authentication from the first security 

13 realm . 

14 2. (Original) The method of claim 1 , further comprising: 

15 providing a common access point executing a web browser; 

16 first displaying a login web page of the second security realm so that a first user 

17 may authenticate with the first security realm and access the first resource, the login 
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1 page comprising a login resource configured to perform said attempting to access the 

2 first resource; and 

3 second displaying the login web page of the second security realm responsive to 

4 said accessing the logout resource so that a second user may authenticate with the first 

5 security realm and access the first resource. 

6 3. (Original) The method of claim 1 , wherein the logout resource 

7 executes a script configured to authenticate a user with the second security realm. 

8 4. (Original) The method of claim 3, wherein the logout resource 



9 comprises a web page element comprising a link to the script, and wherein the web 

10 page element incorporates authentication credentials for the second security realm so 

1 1 that the user need not provide authentication credentials to access the second security 

12 realm. 



1 3 5. (Original) The method of claim 1 , wherein the authentication scheme 

14 comprises HTTP basic authentication. 

1 5 6. (Currently Amended) A method for d e auth e nt i cat i ng from an HT TP 

16 basic auth e nticat i on, comprising: 

17 attempting to access a first resource in a first security realm protected by HTTP 

1 8 basic authentication; 

19 responsive to said attempting to access, receiving an authentication request for 

20 controlling access to the first resource; 
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1 supplying authentication credentials responsive to said authentication request so 

2 as to authenticate with the first security realm; 

3 accessing a second resource in the first security realm; and 

4 responsive to said accessing the second resource, automatically authenticating 

5 with a second security realm and de-authenticating with the first security realm . 

6 7. (Currently Amended) The method of claim 6, wherein HTTP basic 

7 authentication only provides for a single authentication so that said authenticating with 

8 the second security realm results in invalidation of said i nva l idat e s a pr i or authentication 

9 with the first security realm. 

10 8. (Original) The method of claim 7, further comprising: 

1 1 displaying a login element within a web browser, the login element configured to 

12 access the first resource upon activation thereof. 

1 3 9. (Original) The method of claim 8, further comprising: 

14 displaying a logout element within the web browser for performing said 

15 automatically authenticating with the second security realm; and 

16 within a single browser session: 

1 7 authenticating a first user with the first security realm; 

18 authenticating the first user with the second security realm so as to de- 

1 9 authenticate the first user from the first security realm; and 

20 authenticating a second user with the first security realm. 
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1 10. (Currently Amended) An article of manufacture for d e auth e nt i cat i ng 

2 from a first w e b s e rv e r s e cur i ty r e a l m prot e ct e d by an auth e nt i cat i on sch e m e l ack i ng a 

3 d e auth e nticat i on operat i on, comprising a readable medium having instructions 

4 encoded thereon for e x e cut i on by a proc e ssor, sa i d i nstruct i ons capable of directing a 

5 the processor to perform: 



6 attempting to access a first resource in a first security realm protected by the 

7 authentication scheme; 

8 receiving a request for authentication credentials in response to said attempting 

9 to access the first resource; 

10 supplying said authentication credentials in response to the request so as to 

1 1 become authenticated in the first security realm; and 

12 accessing a logout resource in the first security realm, said logout resource 

13 configured to automatically authenticate with a second security realm on accessing 

1 4 thereof and to de-authenticate from the first security realm . 

15 11. (Original) The article of manufacture of claim 10, said instructions 

16 comprising further instructions capable of directing the processor to perform: 

17 providing a common access point executing a web browser; 

1 8 first displaying a login web page of the second security realm so that a first user 

19 may authenticate with the first security realm and access the first resource, the login 

20 page comprising a login resource configured to perform said attempting to access the 

21 first resource; and 
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1 second displaying the login web page of the second security realm responsive to 

2 said accessing the logout resource so that a second user may authenticate with the first 

3 security realm and access the first resource. 

4 12. (Original) The article of manufacture of claim 10, wherein said 

5 instructions for said logout resource comprise instructions capable of directing the 

6 processor to execute a script configured to authenticate a user with the second security 

7 realm. 

8 13. (Original) The article of manufacture of claim 12, further comprising: 

9 said instructions for said logout resource further comprising instructions capable 

10 of directing the processor to provide a web page element comprising a link to the script; 

11 and 

12 said instructions for said web page element further comprising instructions 



13 capable of directing the processor to provide authentication credentials for the second 

14 security realm so that the user need not provide authentication credentials to access the 

15 second security realm. 



16 14. (Original) The article of manufacture of claim 1 0, wherein the 

17 authentication scheme comprises HTTP basic authentication. 

18 15. (Currently Amended) An article of manufacture for d e auth e nt i cating 

19 from an HTTP basic auth e nt i cat i on comprising a readable medium having instructions 

20 e ncod e d th e r e on for e x e cut i on by a proc e ssor, said i nstructions capable of directing a 

21 the processor to perform: 
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1 attempting to access a first resource in a first security realm protected by HTTP 

2 basic authentication; 

3 responsive to said attempting to access, receiving an authentication request for 

4 controlling access to the first resource; 

5 supplying authentication credentials responsive to said authentication request so 

6 as to authenticate with the first security realm; 

7 accessing a second resource in the first security realm; and 

8 responsive to said accessing the second resource, automatically authenticating 

9 with a second security realm and de-authenticating from the first security realm . 

10 16. (Original) The article of manufacture of claim 15, wherein said 

1 1 instructions for authenticating with the second security realm invalidates a prior 

1 2 authentication with the first security realm. 

13 17. (Original) The article of manufacture of claim 16, said instructions 

14 comprising further instructions capable of directing the processor to perform: 

15 displaying a login element within a web browser, the login element configured to 

16 access the first resource upon activation thereof. 

17 18. (Original) The article of manufacture of claim 1 7, said instructions 

1 8 comprising further instructions capable of directing the processor to perform: 

1 9 displaying a logout element within the web browser for performing said 

20 automatically authenticating with the second security realm; and 

21 within a single browser session: 
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1 authenticating a first user with the first security realm; 

2 authenticating the first user with the second security realm so as to de- 

3 authenticate the first user from the first security realm; and 

4 authenticating a second user with the first security realm. 

5 19. (Currently Amended) An apparatus for d e auth e nt i cat i ng from a f i rst 

6 w o b serv e r security roalm protoct o d by an authenticat i on sch e m e l acking a d e 

7 auth e ntication op e ration, comprising: 

8 means for attempting to access a first resource in a first security realm protected 

9 by the authentication scheme; 

10 means for receiving a request for authentication credentials in response to said 

1 1 attempting to access the first resource; 

12 means for supplying said authentication credentials in response to the request so 

13 as to become authenticated in the first security realm; and 

14 means for accessing a logout resource in the first security realm, said logout 



15 resource configured to automatically authenticate with a second security realm such 

16 that or accessing thereof the logout resource results in de-authentication from the first 

17 security realm . 



1 8 20. (Currently Amended) The apparatus of claim 19 40, further 

19 comprising: 

20 means for providing a common access point executing a web browser; 

21 means for first displaying a login web page of the second security realm so that a 

22 first user may authenticate with the first security realm and access the first resource, the 
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1 login page comprising a login resource configured to perform said attempting to access 

2 the first resource; and 

3 means for second displaying the login web page of the second security realm 

4 responsive to said accessing the logout resource so that a second user may 

5 authenticate with the first security realm and access the first resource. 

6 21 . (Currently Amended) An apparatus for de-authenticating from an 

7 HTTP basic authentication comprising: 

8 means for attempting to access a first resource in a first security realm protected 

9 by HTTP basic authentication; 

10 responsive to said attempting to access, means for receiving an authentication 

1 1 request for controlling access to the first resource; 

12 means for supplying authentication credentials responsive to said authentication 

1 3 request so as to authenticate with the first security realm; 

14 means for accessing a second resource in the first security realm; and 

15 responsive to said accessing the second resource, means for automatically 

16 authenticating with a second security realm wherein said authentication results in 

17 automatically de-authenticating from the first security realm . 

1 8 22. (Original) The apparatus of claim 21 , further comprising: 

1 9 means for displaying a logout element within the web browser for performing said 

20 automatically authenticating with the second security realm; and 

21 within a single browser session: 

22 means for authenticating a first user with the first security realm; 
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1 means for authenticating the first user with the second security realm so 

2 as to de-authenticate the first user from the first security realm; and 

3 means for authenticating a second user with the first security realm. 

4 23. (Original) A de-authentication method for a web browser, comprising: 

5 accessing a first resource of a first security realm of the web server with the web 

6 browser, the web browser operable to automatically cache authentication credentials for 

7 a current security realm to which the web browser is authenticated; 

8 receiving a request for authentication responsive to requesting the first resource; 

9 authenticating with the first security realm based at least in part on providing 

10 authentication credentials responsive to the request for authentication, so that the 

1 1 current security realm is first security realm; and 

12 de-authenticating from the first web server security realm based at least in part 

13 on accessing a second resource of a second security realm different from the first 

14 resource of the first security realm, so that the current security realm changes from the 

15 first security realm to the second security realm. 

16 24. (Original) The method of claim 23, wherein the web browser and the 

17 web server communicate using a stateless communication protocol. 
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